Release date:
2026-10-13 10:25:06 UTC
Description:
* SECURITY UPDATE: wrong handler on internal redirect from a CGI program
- debian/patches/CVE-2026-42356.patch: do not propagate the trusted
content-type flag to the target of an internal redirect in
ap_internal_redirect_handler() in modules/http/http_request.c.
- CVE-2026-42356
Updated packages:
-
apache2_2.4.29-1ubuntu4.27+tuxcare.els19_amd64.deb
sha:755843ecf0284fd71ce854a55e4bb31e204c38a6
-
apache2-bin_2.4.29-1ubuntu4.27+tuxcare.els19_amd64.deb
sha:d1f6153155915e5ee8af19c4e09f8bea9cebb179
-
apache2-data_2.4.29-1ubuntu4.27+tuxcare.els19_all.deb
sha:61c16eeb4ee47b2da2d9968a8ac9ca18cfbcf993
-
apache2-dev_2.4.29-1ubuntu4.27+tuxcare.els19_amd64.deb
sha:5aaafef8c11237e076c4161251acb6e73b289103
-
apache2-doc_2.4.29-1ubuntu4.27+tuxcare.els19_all.deb
sha:65ab3dafbc81592dcf64ee7055b91afffe81d9ae
-
apache2-ssl-dev_2.4.29-1ubuntu4.27+tuxcare.els19_amd64.deb
sha:468360753ef13d9798e97f65fe37ebcb372a4d96
-
apache2-suexec-custom_2.4.29-1ubuntu4.27+tuxcare.els19_amd64.deb
sha:5c07c6c5b1314ba3c6c5a910abba05cfa807b941
-
apache2-suexec-pristine_2.4.29-1ubuntu4.27+tuxcare.els19_amd64.deb
sha:c2c905cc76f9aa9170a2eb369fbdbf63b4462cad
-
apache2-utils_2.4.29-1ubuntu4.27+tuxcare.els19_amd64.deb
sha:fd90d163e70598a1786fdfd5fe2444a455fe07cc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
